SELECT LANGUAGE BELOW

Twitter Safety: ‘Compromised’ SEC Account Posted Fake Bitcoin ETF Tweet, Didn’t Enable 2FA – Decrypt

Twitter refutes claims that the platform is responsible for fraudulent tweets sent from a U.S. Securities and Exchange Commission account that falsely announced 13 spot approvals Bitcoin ETF on tuesday.

After a preliminary investigation into the compromised accounts, Twitter's safety team Said “The breach was not due to a compromise of X's systems, but rather due to an unidentified individual gaining control of the phone number associated with the @SECGov account through a third party.”

In its tweet, Twitter Safety also highlighted that SEC accounts did not have two-factor authentication enabled at the time of the hack, a security measure taken by SEC Chairman Gary Gensler. . previously recommended As protection against identity theft and fraud. The safety team added, “We recommend that all users enable this additional layer of security.”

While the world was waiting to see if the Spot Bitcoin ETF would finally be approved on Tuesday afternoon, the “compromised” SEC Twitter account said all approvals had been made. Bitcoin's price has fallen from a two-year high of $47,680 to nearly $45,500.

Gensler said the SEC has not approved the pending Bitcoin ETF after the fraudulent tweets were removed.

” [SEC] “My Twitter account was compromised and fraudulent tweets were posted,” SEC Chairman said. tweeted. “The SEC has not approved the listing and trading of spot Bitcoin exchange products.”

Late Tuesday, the SEC confirmed “unauthorized access and activity” on its Twitter account, saying: Decryption The person responsible for the unauthorized access was fired.

“The SEC will work with law enforcement and partners across the government to investigate the matter and determine appropriate next actions regarding both the unauthorized access and related illegal activity,” the regulator's statement continued.

Twitter did not provide details about its findings, but some on the site suggested the attackers may have engaged in SIM jacking, also known as SIM jacking. SIM exchange. In this malicious attack, a hacker tricks a mobile phone provider into transferring the victim's phone number to her hacker-controlled SIM card, allowing the victim's calls, messages, and potentially online access to her account to be transferred. Allow access.

Last January, trading platform Robinhood's Twitter account was compromised in a SIM-jacking attack and used to facilitate fake token and NFT fraud.

others was suggested SEC employees may have been victims of social engineering, a psychological attack designed to trick individuals into divulging confidential information.

Facebook
Twitter
LinkedIn
Reddit
Telegram
WhatsApp

Related News